Issue metadata
Sign in to add a comment
|
HTTPS content that 301s to HTTP does not upgrade even when Content-Security-Policy: upgrade-insecure-requests is active
Reported by
seandenn...@gmail.com,
Jan 19 2018
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.99 Safari/537.36 Steps to reproduce the problem: 1. If a page with a CSP of upgrade-insecure-requests 2. Request https resource that 301s to http content What is the expected behavior? 301'd http request is upgraded to https, or is denied if https is not supported What went wrong? 301'd request was not upgraded and http resource was fetched Did this work before? N/A Does this work in other browsers? N/A Chrome version: 64.0.3282.99 Channel: beta OS Version: 10.0 Flash Version:
,
Jan 19 2018
,
Jan 22 2018
Unfortunately this is a know issue still. Closing in favor of crbug.com/615885
,
Jan 22 2018
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by krajshree@chromium.org
, Jan 19 2018